CVE-2010-0380 - CVE House
Back to Database
Status published Medium CVE-2010-0380

install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers...

Vulnerability Description

install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictions and modify application settings via a direct request. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-0380

Credits & Attribution

No credits recorded in the NVD database.

References

More from jce-tech

View All →
CVE-2014-8752
Multiple cross-site scripting (XSS) vulnerabilities in view.php in JCE-Tech PHP...
Medium 4.3
CVE-2010-2461
SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows...
High 7.5
CVE-2010-2460
SQL injection vulnerability in merchant_product_list.php in JCE-Tech Shareasale Script (SASS)...
High 7.5
CVE-2010-0376
Cross-site scripting (XSS) vulnerability in product_list.php in JCE-Tech PHP Calendars,...
Medium 4.3
CVE-2010-0375
SQL injection vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded...
High 7.5

Affected Vendor

Affected Software

php calendars script
Vulnerable Versions:
Unknown

Timeline

Official Publish: January 22nd, 2010
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.